Security

A blue robot with an annoyed expression sits cross-armed in the center on a mint green background, surrounded by floating pink padlocks, pink keys, pink shields, and yellow warning triangles with exclamation marks.

Seth's Opinionated Security Best Practices

Security

Updated: April 14, 2026

AI makes it easy to ship code fast-and to paste secrets into the wrong place even faster. This post is a blunt tour of the boring security habits that keep working: password managers and MFA, real secret handling (not "temporary" hardcodes), least-privilege access, and a simple rule for LLMs: treat prompts like support tickets and sanitize before you paste. read on »

A colorful illustration of a blue and pink robot sitting at a desk typing on a laptop, surrounded by floating icons including code snippets, security shields, padlocks, bugs, brain, gears, and network diagrams against a gradient purple-to-orange background, with two steaming coffee cups on either side of the desk.

Securing Dev‑Facing AI: Code Assistants, MCP Devtools, and CI Bots

Security

Updated: April 14, 2026

Dev-facing AI tools don't need to be "evil" to be dangerous. The real risk is the plumbing: plugins, MCP servers, and CI bots wired to powerful tokens that nobody audits. This post lays out the boring rules that actually prevent leaks-read-only by default, tight scopes, dev/prod separation, human review for writes, and short policies engineers will follow. One pasted config or one sloppy token is all it takes. read on »

A robot with a boxy head featuring glowing cyan and magenta eyes sits at a desk working on documents, with its body colored in cyan, magenta, and dark purple/black. The image is split diagonally with a dark purple background on the left showing scattered USB drives and a git branch icon, while the right side has a yellow background featuring puzzle pieces, a document with a bug icon, a pencil, a browser window icon, and additional USB drives.

Shadow AI: Unapproved Tools, Extensions, and Copy‑Paste Ops

Security

Updated: April 14, 2026

Shadow AI isn't a big vendor deal. It's the tiny shortcuts: a browser extension that "summarizes email," a VS Code plugin that indexes your repo, a chatbot where someone pastes internal docs "just to test." Banning it won't work. People have deadlines. The fix is boring and effective: find what's already in use without blame, ship an approved toolkit that covers real jobs, and set simple guardrails for the copy‑paste zone so speed doesn't turn into a data leak. read on »

A purple and white robot sits at a control panel desk holding a magnifying glass, surrounded by floating warning icons including yellow triangles with exclamation marks, bells, and speech bubbles labeled "ALERT," "WARNING," and "ERROR" against a turquoise background. The robot has dual circular displays showing colorful graphs on its face, and the control panel features various buttons, screens, and pie chart displays.

Logging, Monitoring, and Incident Response for AI Systems

Security

Updated: April 14, 2026

If your AI feature ever does something "weird," you won't get a nice stack trace. You'll get a mystery. This post lays out what to log (workflow steps, tool inputs/outputs, prompt + model versions, tokens, latency, correlation IDs), how to redact without building a shadow database of secrets, and which behavior metrics and alerts actually catch trouble. The goal is simple: replay the run, explain what happened, and fix it without guessing. read on »

A colorful cartoon robot in pink, blue, and orange holds a magnifying glass while looking at its reflection in a mirror, revealing complex circuitry and mechanical components inside. Warning symbols (exclamation marks, question marks, and triangular caution signs) float around the robot's head against a beige background.

How to Red‑Team Your Own AI

Security

Updated: June 29, 2026

Demos make agents look calm. Real users don't. This post shows how to red-team an AI agent the way it will actually fail: tool misuse, data leaks, policy bypass, and prompt injection from chats, docs, and tool outputs. You'll get a simple eval harness, ideas for manual attack days, and clear "safe" metrics you can regression-test on every change. read on »

A colorful illustration of a robot-like figure with a transparent dome head containing stacked documents in cyan, orange, and magenta, standing on legs with wheels, surrounded by database icons, arrows, charts, and geometric shapes on a pale yellow background. Purple, orange, and cyan liquid appears to be dripping from the figure onto circular puddles on the ground below.

RAG, Vector DBs, and Leaky Knowledge Bases

Security

Updated: April 04, 2026

RAG leaks usually aren't clever. They're a missing tenant filter, a global index, and one "we'll fix it later" endpoint that ships anyway. This post breaks down where cross-tenant retrieval happens, why filtering after search is already too late, and what a secure RAG setup looks like: isolate tenants or enforce pre-filters, tag everything at ingestion, authorize before retrieval, and log exactly what got pulled. RAG is a search system glued to a text generator. If search can see the wrong data, the model will happily repeat it. read on »

Cute cartoon elephant mascot holding golden padlock icon - Python security, machine learning data protection, and AI model encryption illustration for tech startups

Flask Secret Key Generator: Secure and Free [2026]

Security

Updated: June 29, 2026

Learn how to generate secure Flask secret keys in 2025 with Python. Complete guide covering secrets module, best practices for cryptographic keys, environment variables, and production deployment security for Flask applications. read on »

Discord logo mascot surrounded by colorful security icons including keys, locks, and alphanumeric codes on yellow background - Discord account security and verification illustration

Discord Password Generator [Updated 2026]

Security

Updated: January 02, 2026

Create secure, Discord-compliant passwords instantly with my Discord Password Generator. Follows Discord-specific security best practices. Generate strong passwords that meet all Discord requirements while protecting your account from common Discord-based threats. read on »

Vibrant geometric castle with keyhole entrance, surrounded by cosmic elements and floating shapes, representing artificial intelligence, machine learning algorithms, and tech innovation. Colorful surreal landscape with maze-like foundation, symbolizing complex problem-solving in Python programming and NLP challenges.

Strong Random Password Generator: Free and Secure [2026]

Security

Updated: June 29, 2026

This free password generator creates strong random plain text passwords using the PCG32 random number generator without sending the password over the internet or storing the generated password on a server. read on »

Colorful abstract illustration depicting interconnected pipelines and geometric shapes, reminiscent of programming flowcharts and data structures. Vibrant reds, blues, greens, and yellows on a dark background with smiling emojis, locks, keys, and mathematical symbols scattered throughout, suggesting themes of coding, algorithms, machine learning, and data security in a playful, whimsical style.

Generate Unicode Random Passwords [Updated 2026 with Emojis]

Security

Updated: June 29, 2026

Use the unicode random password generator to create secure passwords using unicode characters such as emojis and extended latin characters. Unicode passwords are much more secure than traditional ASCII passwords. read on »

WiFi router with a thought bubble and the words "taste large hamster patella" showing how passphrases can be secure, memorable and strangely funny.

Strong Random Passphrase Generator for WiFi and Apps

Security

Updated: June 29, 2026

Generate a secure passphrase for your home WiFi networks using this random passphrase generator tool. Create strong, unique passphrases for enhanced online security and password protection. Easily copy and regenerate passphrases as needed. read on »